Actively exploited vulnerabilities affecting KNX Association products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2023-4346https://wildfortech.com/security#CVE-2023-4346The KNX building automation protocol's Connection Authorization Option 1 contains a flaw in its account lockout mechanism. An attacker can exploit this to wipe all devices on a KNX installation and set a BCU key that effectively locks administrators out of their own devices — provided no additional security options are enabled. This is particularly serious in building control environments where KNX manages lighting, HVAC, access control, and other physical systems, meaning a successful attack could cause sustained operational disruption.Wed, 15 Jul 2026 00:00:00 GMTKNX AssociationKNX Protocol Connection Authorization Option 1